CLSA-2026-1788535576

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788535576
Upstream
Published
2026-09-04T15:26:27Z
Modified
2026-10-26T09:31:32Z
Summary
rust: Fix of CVE-2026-33056
Details
  • CVE-2026-33056: in the vendored tar crate, use symlink_metadata instead of metadata when deciding whether an existing path is a directory, so a symlink cannot redirect the subsequent chmod outside the extraction root (applied to all three vendored copies: tar 0.4.38, 0.4.42 and 0.4.43)
References

Affected packages

TuxCare:AlmaLinux:9.6
cargo

Package

Name
cargo
Purl
pkg:rpm/tuxcare/cargo?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
clippy

Package

Name
clippy
Purl
pkg:rpm/tuxcare/clippy?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust

Package

Name
rust
Purl
pkg:rpm/tuxcare/rust?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-analyzer

Package

Name
rust-analyzer
Purl
pkg:rpm/tuxcare/rust-analyzer?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-debugger-common

Package

Name
rust-debugger-common
Purl
pkg:rpm/tuxcare/rust-debugger-common?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-doc

Package

Name
rust-doc
Purl
pkg:rpm/tuxcare/rust-doc?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-gdb

Package

Name
rust-gdb
Purl
pkg:rpm/tuxcare/rust-gdb?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-lldb

Package

Name
rust-lldb
Purl
pkg:rpm/tuxcare/rust-lldb?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-src

Package

Name
rust-src
Purl
pkg:rpm/tuxcare/rust-src?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-std-static

Package

Name
rust-std-static
Purl
pkg:rpm/tuxcare/rust-std-static?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-std-static-wasm32-unknown-unknown

Package

Name
rust-std-static-wasm32-unknown-unknown
Purl
pkg:rpm/tuxcare/rust-std-static-wasm32-unknown-unknown?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-std-static-wasm32-wasip1

Package

Name
rust-std-static-wasm32-wasip1
Purl
pkg:rpm/tuxcare/rust-std-static-wasm32-wasip1?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rust-toolset

Package

Name
rust-toolset
Purl
pkg:rpm/tuxcare/rust-toolset?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"
rustfmt

Package

Name
rustfmt
Purl
pkg:rpm/tuxcare/rustfmt?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.84.1-1.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1788535576.json"